Threats tagged 'ghsa-8q4f-r7f6-8g49'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-125395Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights to Medium5.12026-11-10GCVE DatabaseCVE-2026-125395 Ampache versions prior to 8.4.0 have a stored cross-site scripting (XSS) vulnerability that affects users with upload permissions. This flaw allows attackers to inject malicious scripts via unescaped song lyrics in specific PHP files, leading to script execution in the browsers of users viewing those lyrics. Report on CVE-2026-125395 Vulnerability CWE-79 #ghsa-8q4f-r7f6-8g49	GCVE Database	2026-11-10

Page 1 of 1